Web shell upload via Content-Type restriction bypass
Laboratorio de Portswigger sobre File Upload
Justice-Reaper
Remote code execution via web shell upload
Laboratorio de Portswigger sobre File Upload
Server-side template injection with information disclosure via user-supplied objects
Laboratorio de Portswigger sobre SSTI
Server-side template injection in an unknown language with a documented exploit
Laboratorio de Portswigger sobre SSTI
Server-side template injection using documentation
Laboratorio de Portswigger sobre SSTI
Basic server-side template injection (code context)
Laboratorio de Portswigger sobre SSTI
Basic server-side template injection
Laboratorio de Portswigger sobre SSTI
Blind SQL injection with conditional responses
Laboratorio de Portswigger sobre SQLI
SQL injection UNION attack, retrieving multiple values in a single column
Laboratorio de Portswigger sobre SQLI
SQL injection UNION attack, retrieving data from other tables
Laboratorio de Portswigger sobre SQLI